Skip to content

Commit 750f1d1

Browse files
vdusekclaude
andauthored
chore(deps): override vulnerable black transitive dependency (#774)
## Summary - Added explicit `black>=24.3.0` constraint to dev dependency group to override the vulnerable transitive dependency from `pydoc-markdown` -> `docspec-python` -> `black` - Same fix as applied in [apify-client-python#582](apify/apify-client-python#582) ## Test plan - [x] Pre-commit hooks pass (lint + type check) - [x] CI pipeline passes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 56aa42e commit 750f1d1

File tree

2 files changed

+82
-22
lines changed

2 files changed

+82
-22
lines changed

pyproject.toml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,11 @@ scrapy = ["scrapy>=2.11.0"]
6464

6565
[dependency-groups]
6666
dev = [
67+
# TODO: Remove this constraint once pydoc-markdown updates its dependencies.
68+
# Package pydoc-markdown is unmaintained and pins old docspec-python with vulnerable black.
69+
# See https://github.com/apify/apify-client-python/pull/582/ for more details.
70+
# We explicitly constrain black>=24.3.0 to override the transitive dependency.
71+
"black>=24.3.0",
6772
"build<2.0.0",
6873
"crawlee[parsel]",
6974
"dycw-pytest-only<3.0.0",

0 commit comments

Comments
 (0)